Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/wN8JKHfIx6o3DsTBcOYMoGEM524.roa
File: wN8JKHfIx6o3DsTBcOYMoGEM524.roa (raw, json)
Hash identifier: OrxJF+vMbvFsHFwFAI16OD+BbnfAkRRKNYMZjjiYuEg=
Subject key identifier: C0:DF:09:28:77:C8:C7:AA:37:0E:C4:C1:70:E6:0C:A0:61:0C:E7:6E
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A044BF190C48DFD2471A04AA7BCD183082
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/wN8JKHfIx6o3DsTBcOYMoGEM524.roa
Signing time: Thu 27 Aug 2026 19:42:49 +0000
ROA not before: Thu 27 Aug 2026 19:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59922
IP address blocks: 2a10:fa81:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 08:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:bf:19:0c:48:df:d2:47:1a:04:aa:7b:cd:18:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 27 19:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0df092877c8c7aa370ec4c170e60ca0610ce76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:12:b2:53:20:9e:94:d5:f2:da:17:57:a9:
b7:73:57:d3:5a:0d:d2:57:e3:32:68:b0:f1:c6:8e:
96:14:7f:4b:06:b5:bc:60:3a:35:e9:32:f9:e0:5f:
84:00:03:aa:02:81:dd:3b:b5:32:c4:99:e9:50:03:
55:50:a5:2a:24:e2:13:57:a2:93:33:1a:80:81:a2:
33:33:e5:54:43:85:d3:9a:c1:80:f3:6f:fe:a2:0f:
72:37:d3:db:ae:0f:6a:09:71:c3:c7:66:26:7a:fb:
3d:ac:a1:53:74:06:8a:c0:7b:d7:ce:3c:c0:fd:7e:
be:0f:a3:26:18:7d:cf:18:6b:fe:da:72:0d:ea:d0:
e1:0f:47:a5:3c:44:1a:bb:8a:79:fa:c6:04:68:cd:
33:72:53:c2:e8:ba:c0:cb:e1:1d:7a:6e:68:20:df:
a4:75:7e:63:f3:21:19:56:50:22:f9:30:86:d1:67:
01:2d:ac:64:07:c2:3c:26:16:0e:dd:ec:f2:a7:7f:
fe:1b:e0:52:58:61:8e:b8:8a:b5:d7:9c:45:22:eb:
18:ec:62:21:4e:ee:2b:cd:0a:e5:1f:84:a0:a6:05:
e0:d5:25:e7:aa:fa:ee:c7:39:a7:39:c0:b2:83:7b:
c0:3e:2e:40:42:ad:0d:56:b6:f2:c3:a4:f9:08:a8:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:09:28:77:C8:C7:AA:37:0E:C4:C1:70:E6:0C:A0:61:0C:E7:6E
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/wN8JKHfIx6o3DsTBcOYMoGEM524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:300::/40
Signature Algorithm: sha256WithRSAEncryption
55:f2:26:b9:18:33:6d:c8:20:a8:a2:b4:41:9e:85:26:75:6c:
57:90:9a:22:e8:9e:da:bc:17:77:0d:f7:5f:4c:dc:20:eb:40:
5f:21:fe:66:fa:a3:8c:70:12:a8:02:13:56:ee:43:47:b9:6b:
f0:fc:b7:a0:a2:83:c6:4f:8b:8c:d6:50:55:a0:f2:c4:b3:32:
f7:bc:68:d4:eb:ec:88:b8:aa:cd:d4:dd:40:1e:15:bf:4a:16:
43:85:6a:c2:aa:fd:b9:a2:e6:60:b0:94:ab:31:cf:55:8b:72:
48:c1:4e:44:aa:94:c3:9a:0c:3b:67:5a:5a:68:8a:6a:5a:3f:
93:36:5b:f2:54:38:67:e5:49:2b:d1:c1:93:5a:bd:2b:04:2f:
ba:9b:41:ee:25:35:bf:1e:3c:b2:17:19:a8:40:46:95:75:6d:
28:43:b1:f9:f5:dc:73:21:fe:e1:0b:23:f9:b2:89:3d:d1:9c:
3a:bd:2f:39:3e:0e:55:6e:d9:51:6a:56:a9:b2:38:96:42:1b:
75:76:de:3d:0d:d4:53:e8:d4:de:de:2d:ac:f3:9f:1a:42:8f:
b4:c9:7a:6d:fc:d0:e5:19:e9:bd:78:89:4f:e4:b4:cb:57:47:
6f:19:09:a7:b7:65:ce:df:58:70:a9:e9:ca:26:15:0d:77:34:
c1:d8:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:43:00 2026 by rpki-client